Merge pull request #208609 from LeSuisse/redis-7.0.7

{ lib, stdenv, fetchurl, lua, pkg-config, nixosTests

, tcl, which, ps, getconf, fetchpatch

, tcl, which, ps, getconf

, withSystemd ? stdenv.isLinux && !stdenv.hostPlatform.isStatic, systemd

# dependency ordering is broken at the moment when building with openssl

, tlsSupport ? !stdenv.hostPlatform.isStatic, openssl

stdenv.mkDerivation rec {

  pname = "redis";

  version = "7.0.5";

  version = "7.0.7";

  src = fetchurl {

    url = "https://download.redis.io/releases/${pname}-${version}.tar.gz";

    hash = "sha256-ZwVMw3tYwSXfk714AAJh7A70Q2omtA84Jix4DlYxXMM=";

    hash = "sha256-jTJ9foh9G7MI/Deq9xegv3n1gSnjc5Bpqu6uiJVaxYY=";

  };

  patches = [

    # https://nvd.nist.gov/vuln/detail/CVE-2022-3647

    (fetchpatch {

      name = "CVE-2022-3647.patch";

      url = "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3.patch";

      sha256 = "sha256-R5Tj/bHFTRnvWXiOYvRulqePzU5zvKbGfpO87TLfLWk=";

    })

  ];

  nativeBuildInputs = [ pkg-config ];

  buildInputs = [ lua ]